Black Box LPB4008A User Manual Download Page 114 | Manualshive

Page: 114 / 227

background image

8- and 24-Port Gigabit L2 Managed Power-over-Ethernet (PoE) Switches

724-746-5500 | blackbox.com

114

server using EAP encapsulation. Before successfully authenticating, the supplicant can only connect to the authenticator to perform
authentication message exchange or access the network from the uncontrolled port.

Figure 4-136. Authentication.

Figure 4-137 shows a typical configuration using a single supplicant, an authenticator, and an authentication server. B and C is in the
internal network, and D is Authentication server running RADIUS. The switch at the central location acts as an Authenticator
connecting to PC A. A is a PC outside the controlled port, running Supplicant PAE. In this case, PC A wants to access the services on
device B and C. It must exchange the authentication message with the authenticator on the port it is connected to via an EAPOL
packet. The authenticator transfers the supplicant’s credentials to the Authentication server for verification. If authentication is
successful, PC A will be allowed to access B and C via the switch. If there are two switches directly connected together instead of
single one, for the link connecting two switches, it may have perform two port roles at the end of the link: authenticator and
supplicant, because the traffic is bi-directional.

Figure 4-137. Typical configuration.

Figure 4-138 shows the 802.1X authentication procedure. Follow the steps listed below for the login based on 802.1X port access
control management. The protocol used on the right side is  EAPOL and the left side is  EAP.

1. At the initial stage, the supplicant A is unauthenticated and a port on switch acting as an authenticator is in unauthorized state.
    The access is blocked in this stage.

2. Initiating a session. Either the authenticator or the supplicant can initiate the message exchange. If the supplicant initiates the
  process, it sends an EAPOL-start packet to the authenticator PAE and authenticator will immediately respond with an EAP-
  Request/Identity packet.

3. The authenticator always periodically sends EAP-Request/Identity packets to the supplicant requesting the identity it wants to
  authenticate.

LAN

Authenticator

PAE

Services Offered

by Authenticator

(e.g Bridge Relay)

Authenticator’s System

Authentication

Server’s System

Authentication

Server

Supplicant

PAE

Supplicant’

s

System

Uncontrolled port

Controlled port

MAC Enable

Supplicant A

B

C

Authentication Server

«
...
112
113
114
115
116
...
»

Summary of Contents for LPB4008A

Page 1: ...tch using RS 232 serial port Ethernet port via CLI Ethernet port via Web based SNMP Customer Support Information Order toll free in the U S Call 877 877 BBOX outside U S call 724 746 5500 FREE technical support 24 hours a day 7 days a week Call 724 746 5500 or fax 724 746 0746 Mailing address Black Box Corporation 1000 Park Drive Lawrence PA 15055 1018 Web site www blackbox com E mail info blackbo...

Page 2: ... to acquire a static electrical charge To protect your device always Touch the metal chassis of your computer to ground the static electrical charge before you pick up the circuit device Pick up the device by holding it on the left and right edges only If you need to connect an outdoor device with cable then you need to add an lightning arrestor on the cable between the outdoor device and this dev...

Page 3: ...the equipment is operated in a commercial environment Operation of this equipment in a residential area is likely to cause interference in which case the user at his own expense will be required to take whatever measures may be necessary to correct the interference Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the...

Page 4: ...tufas u otros aparatos incluyendo amplificadores que producen calor 11 El aparato eléctrico deberá ser connectado a una fuente de poder sólo del tipo descrito en el instructivo de operación o como se indique en el aparato 12 Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada 13 Los cables de la fuente de poder deben ser guiados de tal manera...

Page 5: ...ent Agent 20 3 4 1 Connect To Console Port 20 3 4 2 Set IP Address Subnet Mask and Default Gateway IP Address 20 3 4 3 Managing LPB4008A through the Ethernet Port 21 3 5 IP Address Assignment 22 3 5 1 IP Address 22 3 5 2 Subnet Mask 23 3 5 3 Default Gateway 24 3 5 4 DNS 24 3 6 Typical Application 24 4 Operation of Web based Management 27 4 1 Web Management Home Overview 28 4 1 1 The Information of...

Page 6: ...ng Configuration 119 4 13 1 Port 120 4 13 2 Aggregator View 121 4 13 3 Aggregation Mode Configuration 122 4 13 4 LACP System Priority 122 4 14 STP Configuration 122 4 14 1 Status 123 4 14 2 Configuration 124 4 14 3 STP Port Configuration 126 4 15 MSTP 126 4 15 1 Status 126 4 15 2 Region Config 127 4 15 3 Instance View 132 4 16 Mirror 133 4 17 Multicast 133 4 17 1 IGMP Mode 133 4 17 2 IGMP Proxy 13...

Page 7: ...gnostics 149 4 23 1 Diag 149 4 23 2 Ping 150 4 24 Maintenance 150 4 24 1 Warm Restart 150 4 24 2 Software Upload 151 4 25 Logout 151 5 Operation of CLI Management 153 5 1 CLI Management 153 5 2 Login 153 5 3 Commands of CLI 153 5 3 1 Global Commands of CLI 154 5 3 2 Local Commands of CLI 158 6 Troubleshooting 226 7 Null Modem Cable Specifications 227 ...

Page 8: ...Mbps MAC Address and Self learning 8K MAC address 4K VLAN table entries Buffer Memory Embedded 1392 KB frame buffer Flow Control IEEE 802 3x compliant for full duplex Backpressure flow control for half duplex Cable and Maximum Length TP CAT5 UTP cable up to 328 feet 100 m 1000BASE SX Up to 220 275 500 550 m which depends on Multi Mode Fiber type 1000BASE LX Single Mode Fiber up to 10 30 50 km 1000...

Page 9: ...port Egress Ingress rate control Quality of Service QoS Referred as Class of Service CoS by the IEEE 802 1P standard Classification of packet priority can be based on either a VLAN tag on packet or a user defined per port QoS Two queues per port IP TOS Classification TCP UDP Port Classification IP DiffServe Classification Port Security Limited number of MAC addresses learned per port static MAC ad...

Page 10: ...s Single Fiber WDM BiDi transceiver is designed with an optic Wavelength Division Multiplexing WDM technology that transports a bi directional full duplex signal over a single fiber simultaneously Active PHY Power Management and Perfect Reach Power Management help reduce power consumption The switch also supports the IEEE Standard 802 1ab Link Layer Discovery Protocol to provide a debugging tool a...

Page 11: ...k Layer Discovery Protocol The switch supports LLDP automated device discovery protocol for easy mapping of network management applications 2 3 What s Included Your package should include the following items If anything is missing or damaged please contact Black Box Technical Support at 724 746 5500 or info blackbox com 1 8 Port LPB4008A or 24 Port LPB4024A Gigabit L2 Managed Power Over Ethernet S...

Page 12: ...rnet PoE Switches 724 746 5500 blackbox com 12 Rear Panel Figure 2 3 Rear panel LPB4008A Figure 2 4 Rear panel LPB4024A 2 5 LED Indicators Figure 2 5 LED indicators on the LPB4008A s front panel Figure 2 6 LED indicators on the LPB4024A s front panel ...

Page 13: ... fiber LC BiDi LC etc modules The twisted pair ports are the switch s two rightmost RJ 45 twisted pair connectors For the fiber option 1000 Mbps fiber transceiver modules slide into the switch s two fiber module slots located to the right of the twisted pair connectors on the switch s front panel The fiber transceiver modules are used for high speed connection expansion The two fiber ports can aut...

Page 14: ... is the right model and conforms to the chassis 2 Slide the module into the slot Make sure that the module is properly seated against the slot socket connector 3 Connect the fiber optic network cable to the connector s on the module If you want to install a second module in the LPB4008A switch or second third and fourth module in the LPB4024A switch repeat steps 1 3 3 1 2 TP Port and Cable Install...

Page 15: ...ad the firmware into the memory It will take about 30 seconds Then all LEDs on the switch will flash once and automatically perform a self test The switch is now in the ready state 3 2 Installing the Switch in a 19 Inch Wiring Rack or Cabinet CAUTION Allow enough space for the cooling fan at both sides of the switch to provide ventilation Wear a grounding device for electrostatic discharge 1 Using...

Page 16: ...r CAT5e cable that s up to 100 meters long For a Gigabit Ethernet TP network connection use CAT5 or CAT5e cable that s up to 100 meters long We recommend using CAT5e cable for Gigabit connections 3 3 2 Fiber Transceiver Ports There are two categories of fiber multimode MM and single mode SM Multimode fiber is categorized into several classes by the distance it supports The classes are SX LX LHX XD...

Page 17: ... protocol specifications which limit the timing requirement from physical signals defined by the Media Access Control MAC and PHY802 3 series specification and timing from some OSI layer 2 protocols such as 802 1d 802 1q and LACP The fiber TP cables and devices bit time round trip delay are described in Table 3 1 Table 3 1 Cable s bit time round trip delay 1000BASE X TP Fiber 100BASE TX TP 100BASE...

Page 18: ...rectly is bounded in the same VLAN area Here VLAN area is defined by what VLAN you are using The switch supports both port based VLAN and tag based VLAN The following diagram shows how port based VLANs and tag based VLANs work Case2a Port based VLAN See Figure 3 4 Figure 3 4 One switch connected to four VLANs in a port based VLAN 1 The same VLAN members can not be connected to different switches 2...

Page 19: ...ers 2 VLAN2 members can not access VLAN1 and VLAN3 members but they can access VLAN4 members 3 VLAN3 members can not access VLAN1 VLAN2 and VLAN4 4 VLAN4 members cam not access VLAN1 and VLAN3 members but they can access VLAN2 members Case3 The same VLAN members can be at different switches with the same VID See Figure 3 6 Figure 3 6 Attribute based VLAN diagram VLAN 1 VLAN 2 VLAN 3 ...

Page 20: ...a terminal emulator supporting a VT100 ANSI terminal with the switch s serial port default settings For example Windows98 2000 XP HyperTerminal utility NOTE The switch s serial port default settings are Baud rate 115200 Stop bits 1 Data bits 8 Parity N Flow control none 4 After you connect the cables press the Enter key The login prompt will be shown on the screen The default username and password...

Page 21: ...net port They are CLI Web browser and SNMP manager The user interface for the last one is NMS dependent and is not explained in this manual CLI and Web browser management interface are described on the next page Figure 3 9 Connecting the Ethernet LAN PC to the switch for network management through an Ethernet port Before you communicate with the switch finish the configuration of the IP address or...

Page 22: ...dentifier address The former indicates the network where the addressed host resides and the latter indicates the individual host in the network that the address of host refers to The host identifier must be unique in the same LAN The IP address we used is version 4 known as IPv4 Figure 3 11 IP address structure Classifying addresses divides the IP address into three classes class A class B and cla...

Page 23: ...age an IP network For a class B network 128 1 2 3 the default subnet mask may be 255 255 0 0 The first two bytes are all 1s This means more than 60 thousands of nodes in flat IP addresses will be on the same network It s too large to manage practically If we divide it into smaller networks by extending the network prefix from 16 bits to say 24 bits the network uses its third byte to subnet this cl...

Page 24: ... the same network address and append your host address to it Figure 3 12 First type in the IP Address as shown in Fig 2 12 enter default IP address 192 168 1 1 for instance An IP address such as 192 168 1 x must be set on your PC Second type in the Subnet Mask as shown in Fig 2 12 enter 255 255 255 0 Any subnet mask such as 255 255 255 x is allowed in this case 3 5 4 DNS The Domain Name Server tra...

Page 25: ...e 3 13 Network Connection between Remote Site and Central Site L3 Managed Switch Server Server L3 Managed Switch 8 Port Gigabit L2 Managed Power over Ethernet Switch 8 Port Gigabit L2 Managed Power over Ethernet Switch Wireless AP PC IP Cam PC PC PC PC Server ...

Page 26: ...re 3 14 Peer to peer Network Connection Figure 3 15 Office Network Connection 8 Port Gigabit L2 Managed Power over Ethernet Switch L2 Managed Switch Wireless PC IP Cam PC Wireless PC IP Cam PC L2 Managed Switch 8 Port Gigabit L2 Managed Power over Ethernet Switch Collision Domain 1 Collision Domain 2 ...

Page 27: ...Figure 4 1 or input Ctrl Z in the CLI s login screen See Figures 4 1 4 2 The system will display the user s serial number Write down this serial number and contact Black Box Technical Support at 724 746 5500 for a temporary password Use this new password as ID and Password to login to the system temporarily with manager authority The user can only login to the system one time using the temporary p...

Page 28: ...ribes basic system information including Model Name System Description Location Contact Device Name System Up Time Current Time BIOS Version Firmware Version Hardware Mechanical Version Serial Number Host IP Address Host Mac Address Device Port RAM Size Flash Size and CPU Load The screen tells you the software version used MAC address serial number how many ports are good and so on This is helpful...

Page 29: ...op of the screen shows the front panel of the switch The linked ports display green ports not linked will be dark For the optional modules the slot will show only a cover plate if no module is installed and will show a module if a module is present The module image depends on the one you inserted If disconnected the port will be dark if linked green See Figure 4 3 ...

Page 30: ...If you do not choose any selection in the Auto Logout list the Auto Logout function turns on and the system will log out automatically after three minutes of no activity on the device If you choose OFF the screen will stay the same The default value is ON On the left side the page lists the main menu tree for the web The menu is arranged hierarchically When you open the function folder a sub menu ...

Page 31: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 31 4 1 2 Structure of the Menu ...

Page 32: ...Switch with 2 SFP Dual Media Location Where the switch is located User defined Contact To easily manage and maintain this device write down the contact person and phone here for getting help You can configure this parameter through the device s user interface or SNMP Device name The name of the switch User defined Default is LPB4008A or LPB4024A System up time The time accumulated since this switc...

Page 33: ...e The size of the flash memory in this switch CPU Loading The loading of the CPU on this switch 4 2 2 Account Configuration Only the administrator can create modify or delete the username and password The administrator can modify other users passwords Users logged in as Guest can only modity their own password You must authorize the administrator guest identites before configuring the username and...

Page 34: ...g is simple just input Year Month Day Hour Minute and Second within the valid value range indicated for each item If you input an invalid value for example 61 minutes the switch will record the figure as 59 NTP is a well known protocol used to synchronize switch system time over a network NTP an Internet draft standard formalized in RFC 1305 uses version 3 protocol The switch provides four built i...

Page 35: ... default Time Zone setting is GMT To select a different time zone select the time zone first and then perform time sync via NTP The switch will combine this time zone offset and updated NTP time to calculate the local time The switch supports configurable time zones from 12 to 13 step 1 hour Default Time zone 8 Hrs Daylight Saving Daylight savings time adjusts the time lag or advance in hours acco...

Page 36: ... gateway and DNS for the switch Figure 4 9 IP configuration screen Parameter description DHCP Setting DHCP is the abbreviation for Dynamic Host Configuration Protocol Here DHCP means a switch to turn ON or OFF the function The switch supports a DHCP client that s used to get an IP address automatically if you set this function to Enable When enabled the switch will issue the request to the DHCP se...

Page 37: ...ult 192 168 1 254 DNS Domain Name Server translates between IP address and name address The switch supports the DNS client function to re route the mnemonic name address to the DNS server to get its associated IP address for accessing the Internet Users can specify a DNS IP address for the switch With this the switch can translate a mnemonic name address into an IP address There are two ways to sp...

Page 38: ...anagement Policy Through the management security configuration the manager can setup the switch and limit user access to this switch The following rules are offered for the manager to manage the switch Rule 1 When no lists exist then it will accept all connections Accept Rule 2 When only accept lists exist then it will deny all connections excluding the connection within the acceptable range Accep...

Page 39: ...nable to connect to the switch Deny You can place some restrictions on the user connect mode For example you can decide which VLAN VID will be accepted or denied by the switch You can also set the switch to accept or deny the users IP range identify user ports that will connect to the switch or control and connect to the switch via Http Telnet or SNMP Figure 4 11 Management policy list screen Figu...

Page 40: ...can access and manage the switch in three ways via Http Telnet and SNMP Action The switch supports two kinds of options for managed valid Action Type including Deny and Accept The default is Deny When you choose Deny you will be restricted from managing the switch based on the Access Type you choose If you select Accept you will have the authority to manage the switch 4 2 7 System Log The System L...

Page 41: ...changes to represent that the device is under your management NOTE Logging into the switch via the console will remove the grouping temporarily Each device in the group will be shown as a station address the last number of IP Address device name on the button for example 196_LPB4008A Otherwise it will show if no corresponding device exists Once the devices join the group successfully then they are...

Page 42: ...n the following sections 4 3 1 Port Configuration Port Configuration changes the setting of each port You can set reset the several functions They are described in detail below Function name Port Configuration Function description Sets each port s operation mode The switch supports three parameters for each port state mode and flow control Figure 4 16 Port configuration screen Configuration Status...

Page 43: ...onnection is half duplex choose Discard or Restart Discard The Discard mode determines whether the MAC drop frames after an excessive collision has occurred If set to Discard a frame is dropped after excessive collisions This conforms to IEEE Std 802 3 half duplex flow control operation Restart The Restart mode determines whether the MAC retransmits frames after an excessive collision has occurred...

Page 44: ...eed and duplex of all port 10 Mbps 100 Mbps and 1000 Mbps speeds are supported for TP media with half duplex and full duplex If the media is 1Gbps fiber 1000 Mbps speed is supported only The status of speed duplex mode is determined by 1 the negotiation of both local port and link partner in Auto Speed mode or 2 user setting in Force mode The local port must preset its capability Flow Control Show...

Page 45: ...maximum baud rate of the fiber module supported for instance 10M 100M 1G and so on Vendor OUI Displays the Manufacturer s OUI code which is assigned by IEEE Vendor Name Displays the company name of the module manufacturer Vendor P N Displays the product name by module manufacturer Vendor Rev Revision Displays the module revision Vendor SN Serial Number Show the serial number assigned by the manufa...

Page 46: ...rval defined by the user The Refresh Interval is used to set the update frequency Function name Simple Counter Function description Display the summary counting of each port s traffic including Tx Byte Rx Byte Tx Packet Rx Packet Tx Collision and Rx Error Packet Figure 4 19 Port statistics overview screen Parameters description Packets Transmit The number of packets transmitted Receive The number ...

Page 47: ...and restart counting The data is updated at every time interval defined by the user The valid range is 3 to 10 seconds The Refresh Interval is used to set the update frequency Default update time is 3 seconds Function name Detail Counter Function description Display the detailed number of each port s traffic In Figure 4 20 the window can show all port s information at one time Figure 4 20 Detailed...

Page 48: ...Bytes Number of 512 1023 byte frames in good and bad packets transmitted Tx 1024 Bytes Number of 1024 max_length byte frames in good and bad packets transmitted Rx CRC Alignment Number of Alignment errors and CRC error packets received Rx Undersize Number of short frames 64 Bytes with valid CRC Rx Oversize Number of long frames according to max_length register with valid CRC Rx Fragments Number of...

Page 49: ...for each port that does not have a device attached Default Disable 4 4 VLAN The switch supports Tag based VLAN 802 1Q and Port based VLAN Support 4094 active VLANs and VLAN ID 1 4094 VLAN configuration is used to partition your LAN into small ones as needed Configure it properly to improve security security and increase performance but reduce VLAN management 4 4 1 VLAN Mode Function name VLAN Mode...

Page 50: ...an support up to maximal 24 port based VLAN groups Tag based Tag based VLAN identifies its member by VID This is quite different from port based VLAN If there are any more rules in ingress filtering list or egress filtering list the packet will be screened to determine if it can be forwarded The switch supports 802 1q For more details see Chapter 3 Each tag based VLAN must be assigned a VLAN name ...

Page 51: ...ge of IGMP messages in the VLAN group members and follow with IGMP router port configuration which connects to a router closer to the root of the tree This interface is the upstream interface The router on the upstream interface should be running IGMP You enable IGMP on the interfaces that connect the system to its hosts that are farther away from the root of the tree Refer to Section 3 15 1 for a...

Page 52: ...vate VLAN to enable Private VLAN service 2 Assign port members to the VLAN2 Figure 4 26 Create VLAN group 3 Assign isolated ports Figure 4 27 Port isolation configuration Press the Save button to complete the PVLAN configuration process 4 4 3 Port based Group Function name Port based Group Configuration Function description Shows the information for the existing port based VLAN groups To create ed...

Page 53: ...ble or disable port members in the new added VLAN Enable means it is a member of the VLAN Just click on the check box beside the port x to enable it Add new VLAN Create a new Port based VLAN Input the VLAN name and choose the member by clicking on the check box beside the port No then press the Apply button and the setting will take effect Figure 4 29 Create VLAN group Delete Group Press the Delet...

Page 54: ...This PVID range is 1 4094 Before you set a number x as PVID you must create a Tag based VLAN with VID x For example if port x receives an untagged packet the switch will apply the port x s PVID assume it is VID y to tag this packet and the packet then will be forwarded as a tagged packet with VID y Role This is a port egress rule Choose Access Trunk or Hybrid Access means the outgoing packets carr...

Page 55: ...AC Table Maintenance Static Forward Static Filter and MAC Alias which cannot be categorized to a function type They are described below 4 5 1 Mac Address Table Function name MAC Address Table Information Function Description This function can allow the user to set up the MAC Table processing mechanis An idle MAC address exceeding MAC Address Age out Time will be removed from the MAC Table The rang...

Page 56: ...rt s MAC address dynamic learning mechanism Disable Disable this port s MAC address dynamic learning mechanism only support static MAC address settings Secure Disable this port s MAC address dynamic learning mechanism and copy the dynamic learning packets to a CPU Save Save MAC Address Table configuration Reset Reset MAC Address Table configuration 4 5 2 Static Filter Function name Static Filter F...

Page 57: ...rd Function Description Static Forward is a function that allows the user in the static forward table to access a specified port of the switch The Static Forward table associated with a specified port of a switch is set up by manually inputting a MAC address and its alias name When a MAC address is assigned to a specific port all of the switch s traffic sent to this MAC address will be forwarded t...

Page 58: ...MAC Alias Function name MAC Alias Function description MAC Alias function is used to let you assign MAC address a plain English name This will help you tell which MAC address belongs to which user in the illegal access report At the initial time it shows all pairs of the existing alias name and MAC address There are three MAC alias functions in this function folder including MAC Alias Add MAC Alia...

Page 59: ...ressed by hex and separated by hyphens For example 00 40 C7 D6 00 01 Alias MAC alias name you assign NOTE If there are too many MAC addresses already in the table type in the MAC address and alias name directly 4 5 5 MAC Table Function name MAC Table Function Description Display the static or dynamic learning MAC entry and the state for the selected port Figure 4 37 MAC table information screen ...

Page 60: ...cription In the PoE Port Management function user can configure the PoE settings The switch complies with IEEE 802 3af protocol and is capable of detecting automatically whether the device linked to the port on the switch is a PD Powered Device or not The switch also manages the power supplement based on the Class of the PD and it will stop supplying the power once the power required by the PD exc...

Page 61: ...bute database and GARP Information Propagation GIP to communicate among switches and end stations With GID information and GIP GVRP state machines maintain the contents of Dynamic VLAN Registration Entries for each VLAN and propagate this information to other GVRP aware devices to setup and update their knowledge database the set of VLANs associated with currently active members and through which ...

Page 62: ...ng is Normal Fixed Registration Fixed The Registrar ignores all GARP messages and all members remain in the registered IN state Forbidden Registration Forbidden The Registrar ignores all GARP messages and all members remain in the unregistered EMPTY state Restricted Mode This function restricts a dynamic VLAN from being created when this port receives a GVRP PDU Choose Enable or Disable Disabled I...

Page 63: ...g There are 8 QoS Control Lists QCL for advanced programmable QoS classification based on IEEE 802 1p Ethertype VID IPv4 IPv6 DSCP and UDP TCP ports and ranges High flexibility in the classification of incoming frames to a QoS class The QoS classification looks for information up to Layer 4 including IPv4 and IPv6 DSCP IPv4 TCP UDP port numbers and user priority of tagged frames This QoS classific...

Page 64: ... QoS class values for VLAN tagged or priority tagged frames Queuing Mode There are two Scheduling Methods Strict Priority and Weighted Fair The default is Strict Priority After you choose a Scheduling Method click on the Apply button Queue Weighted There are four queues per port and four classes weighted number 1 2 4 8 for each queues Select the weighted number when the scheduling method is set to...

Page 65: ...4 44 Entry priority QCE Configuration The QCL searches of 12 QoS Control Entries QCEs from the top of the list to the bottom of the list for a match The first matching QCE determines the frame s QoS classification The QCE ordering is important for the resulting QoS classification algorithm If no matching QCE is found the default QoS class is used in the port QoS configuration Figure 4 45 QCE confi...

Page 66: ...L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 66 Figure 4 46 QCE configuration screen port range Figure 4 47 QCE configuration screen DSCP type Figure 4 48 QCE configuration screen ToS priority class ...

Page 67: ...Well known protocols already assigned EtherType values The commonly used values in the EtherType field and corresponding protocols are listed below Ethertype Hexadecimal Protocol 0x0800 IP Internet Protocol 0x0801 X 75 Internet 0x0802 NBS Internet 0x0803 ECMA Internet 0x0804 Chaosnet 0x0805 X 25 Level 3 0x0806 ARP Address Resolution Protocol 0x0808 Frame Relay ARP RFC1701 0x6559 Raw Frame Relay RF...

Page 68: ...P Light Weight Access Point Protocol 0x88CC LLDP Link Layer Discovery Protocol 0x8E88 EAPOL EAP over LAN 0x9000 Loopback Configuration Test Protocol 0xFFFF reserved VLAN ID The configurable VID range 1 4094 UDP TCP Port To select the UDP TCP port classification method by Range or Specific UDP TCP Port Range The configurable ports range 0 65535 You can refer to following UDP TCP port numbers inform...

Page 69: ...ere are two units for ingress rate limit kbps Mbps Engress Enabled Engress enabled to limit egress bandwidth by shaper rate Engress Rate The configurable engress rate range 500 kbps 1000000 kbps 1 Mbps 1000 Mbps Engress Unit There are two units for egress shaper rate limit kbps Mbps 4 8 4 Storm Control Function name Storm Control Configuration Function description The switch supports storm ingress...

Page 70: ...izard Function name Wizard Function description The QCL configuration Wizard configures the target users QCL rules for QoS configuration The wizard provides typical network application rules Figure 4 52 QCL configuration screen Parameter description Please select an Action User need to select an action from the following items then click on Next to finish QCL configuration Set up Port Policies Set...

Page 71: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 71 Figure 4 53 Set up Port Policies screen Parameter description QCL ID QoS Control List QCL 1 24 Port Member Port Member 1 24 ...

Page 72: ... Finish screen Parameter description Wizard Again Click on the Wizard Again button to go back to the QCL Configuration Wizard Finish When you click on Finish the parameters will be set according to the wizard configuration and shown on the screen Click on Apply to confirm the changed parameters Figure 4 55 Set up Port Policies ...

Page 73: ... Yahoo Messenger Phone Napster Real Audio Games Blizzard Battlenet Diablo2 and StarCraft Fighter Ace II Quake2 Quake3 MSN Game Zone User Definition Ethernet Type VLAN ID UDP TCP Port DSCP Ethernet Type Value Type Range 0x600 0xFFFF VLAN ID VLAN ID Range 1 4094 UDP TCP Port Two Mode Range Specific UDP TCP Port Range Port Range 0 65535 UDP TCP Port No Port Range 0 65535 DSCP Value DSCP Value Range 0...

Page 74: ... Switches 724 746 5500 blackbox com 74 Figure 4 57 Set up Typical Network Application Rules Parameter description QCL ID QCL ID Range 1 24 Traffic Class There are four classes Low Normal Medium High Figure 4 58 Set up Typical Network Application Rules Finish ...

Page 75: ...anagement 724 746 5500 blackbox com 75 Parameter description QCL QoS Control List QCL 1 24 Figure 4 59 Set up TOS Precedence Mapping Parameter description QCL ID QoS Control List QCL 1 24 TOS Precedence 0 7 Class Low Normal Medium High ...

Page 76: ... SMI syntax The SNMP agent running on the switch responds to the request issued by the SNMP manager The NMS issues the trap information The switch supports a switch to turn on or off the SNMP agent If you set the field SNMP to Enable the SNMP agent will start You can access all supported MIB OIDs including RMON MIB via SNMP manager If the field SNMP is set to Disable the SNMP agent will be de acti...

Page 77: ...y Each function has its own community name The community name for GET only works for the GET function and can t be applied to other functions such as SET and Trap Default SNMP function Enable Default community name for GET public Default community name for SET private Default community name for Trap public Default Set function Enable Default trap host IP address 0 0 0 0 Default port number 162 Tra...

Page 78: ...each policy can be applied to any port This makes it very easy to determine what type of ACL policy you will be working with 4 10 1 Ports Function name ACL Port Configuration Function description The switch ACL function supports up to 128 Access Control Entries ACEs using 128 shared ACEs for ingress classification You can create an ACE and assign this ACE for each port with Any assign this ACE for...

Page 79: ...his port receives one of the met ACL packets the counter value will increase 1 4 10 2 Rate Limiters Function name ACL Rate Limiter Configuration Function description There are 16 rate limiter IDs You can assign one limiter ID for each port The rate limit configuration unit is Packet Per Second pps Figure 4 63 ACL rate limiter configuration Parameter description Rate Limiter ID ID Range 1 16 Rate p...

Page 80: ...There are 8 policies Each port can select one policy then decide which Permit Deny Rate Limitation and Port Copy actions to take according to the ACL configuration packet s IPv4 EtherType ARP Protocol MAC Parameters and VLAN parameters Figure 4 64 Ingress Port Move up this entry Insert an entry Edit this entry Move up down this entry Delete this entry Figure 4 65 Entry screen Parameter description...

Page 81: ...66 Ingress Port Figure 4 67 Access control list configuration Parameter description Frame Type Any Ethernet Type ARP IPv4 Any Includes all frame types Ethernet Type Includes all Ethernet frame types ARP Includes all ARP protocol frame types IPv4 Includes all IPv4 protocol frame types ...

Page 82: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 82 Figure 4 68 Frame Type Figure 4 69 SMAC filter value Figure 4 70 Ethernet type parameters screen ...

Page 83: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 83 Figure 4 71 ARP parameters Figure 4 72 ARP request reply Figure 4 73 ARP sender IP filter ...

Page 84: ... Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 84 Figure 4 74 ARP target IP filter Figure 4 75 ARP sender IP address Figure 4 76 ARP sender IP filter Figure 4 77 ARP target IP filter ...

Page 85: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 85 Figure 4 78 ARP RARP DMAC match Figure 4 79 ARP IP Ethernet length Figure 4 80 ARP IP Figure 4 81 ARP Ethernet ...

Page 86: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 86 Figure 4 82 ARP Ethernet Figure 4 83 IPv4 ...

Page 87: ... of Web based Management 724 746 5500 blackbox com 87 Figure 4 84 IPv4 protocol filter Figure 4 85 IPv4 ICMP parameters Figure 4 86 IPv4 ICMP type filter Figure 4 87 IPv4 ICMP type value Figure 4 88 IPv4 ICMP code filter ...

Page 88: ...r over Ethernet PoE Switches 724 746 5500 blackbox com 88 Figure 4 89 IPv4 ICMP code value Figure 4 90 IPv4 UDP parameters Figure 4 91 IPv4 UDP dest Port filter Figure 4 92 IPv4 UDP source port filter Figure 4 93 IPv4 UDP source port range ...

Page 89: ...4 Operation of Web based Management 724 746 5500 blackbox com 89 Figure 4 94 IPv4 UDP dest Port filter Figure 4 95 IPv4 UDP dest port number Figure 4 96 IPv4 UDP dest port range Figure 4 97 IPv4 TCP parameters ...

Page 90: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 90 Figure 4 98 IPv4 TCP dest port filter Figure 4 99 IPv4 TCP FIN Figure 4 100 TCP parameters ...

Page 91: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 91 Figure 4 101 IPv4 dest port range Figure 4 102 IPv4 TCP FIN Figure 4 103 IP parameters ...

Page 92: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 92 Figure 4 104 IPv4 IP TTL Figure 4 105 IPv4 IP Fragment Figure 4 106 IPv4 SIP Filter ...

Page 93: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 93 Figure 4 107 IPv4 SIP Filter Any Figure 4 108 IPv4 SIP Filter Host Figure 4 109 IPv4 SIP Filter Network ...

Page 94: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 94 Figure 4 110 IPv4 DIP Filter Figure 4 111 IPv4 DIP address Figure 4 112 IPv4 DIP address ...

Page 95: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 95 Figure 4 113 Action Figure 4 114 Rate Limiter ...

Page 96: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 96 Figure 4 115 Port Copy Figure 4 116 DMAC Filter ...

Page 97: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 97 Figure 4 117 VLAN ID Filter Figure 4 118 VLAN ID Filter Figure 4 119 Tag Priority ...

Page 98: ...lter Any Ethernet Type ARP IPv4 Any Includes all frame types Ethernet Type Includes all Ethernet frame types ARP Includes all ARP protocol frame types IPv4 Includes all IPv4 protocol frame types MAC Parameters When Frame Type Any DMAC Filter Any MC BC UC Any Includes all destination MAC addresses MC Includes all Multicast MAC addresses BC Includes all Broadcast MAC addresses UC Includes all Unicas...

Page 99: ...ue 0x600 0xFFFF ARP Parameters When Frame Type ARP ARP RARP Any ARP RARP Other Any Includes all ARP RARP protocol frame types ARP Includes all ARP protocol frame types RARP Includes all RARP frame types Other Includes other frame types except ARP RARP protocol Request Reply Any Request Reply Any Includes all ARP RARP Requests and Replies Request Includes all ARP RARP request frames Reply Includes ...

Page 100: ...l 0x4 1 The ingress ARP PARP frames where the Hardware size equals 0x6 and the Protocol size is 0x4 IP Any 0 1 Any Both 0 and 1 0 The ingress ARP PARP frames where the Protocol type does not equal 0x800 1 The ingress ARP PARP frames where Protocol type equals 0x800 Ethernet Any 0 1 Any Both 0 and 1 0 The ingress ARP PARP frames where Hardware type does not equal 0x100 1 The ingress ARP PARP frames...

Page 101: ... Default 255 255 255 0 DIP Filter DIP Destination IP Address Any Host Network Any Includes all destination IP addresses Host Includes only one specific destination host IP address Network A specific IP subnet segment under the destination IP mask DIP Address Default 192 168 1 254 DIP Mask Default 255 255 255 0 IP Parameters Frame Type IPv4 and IP Protocol Filter ICMP ICMP Type Filter Any Specific ...

Page 102: ... No 0 65535 Source Port Range 0 65535 Dest Port Filter Any Specific Range Any Includes all TCP destination ports Specific Follows Dest Port No setting for ingress classification Dest Port No 065535 Dest Port Range 065535 TCP FIN TCP Control Bit FIN Means No more data from sender Any 0 1 Any Includes all TCP FIN case 0 The TCP control bit FIN is 0 1 The TCP control bit FIN is 1 TCP SYN TCP Control ...

Page 103: ...tocol value is 1 IP Parameters Frame Type IPv4 and IP Protocol Filter Other IP Protocol Value Default 255 IPTTL Time To Live The quantity of routers a datagram can pass through Each router decrements this value by 1 until it reaches 0 when the datagram is discarded This keeps misrouted datagram from remaining on the Internet forever Any Includes all conditions for IPTTL Non Zero IPTTL is Non Zero ...

Page 104: ...54 DIP Mask Default 255 255 255 0 VLAN Parameters VLAN ID Filter Any Specific Any Includes all VLAN IDs Specific According to the following VLAN ID and Tag Priority settings for ingress classification VLAN ID 1 4094 Tag Priority Any 0 7 Any Includes all Tag Priority values 0 7 The Tag Priority Value is a number 0 7 Action Parameters When the ingress frame meets the above ACL ingress classification...

Page 105: ...Port Policies Set up Typical Network Application Rules Set up Source MAC and Source IP Binding Next Click on Next to confirm the current setting and go to the next step automatically Cancel Cancel the current setting and go back to the top layer in the ACL wizard Back Click on Back to go back to the previous step Wizard Again Click on Wizard Again and the UI will go back to top layer in the wizard...

Page 106: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 106 Figure 4 121 Set up Policy Rules Figure 4 122 Set up Policy Rules Figure 4 123 Set up Policy Rules ...

Page 107: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 107 Figure 4 124 Set up Policy Rules Finish Figure 4 125 Set up Port Policies ...

Page 108: ...8 and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 108 Figure 4 126 Set up Port Policies Figure 4 127 Set up Port Policies finished screen ...

Page 109: ...Chapter 4 Operation of Web based Management 724 746 5500 blackbox com 109 Figure 4 128 Set up Port Policies Finish Figure 4 129 Set up Typical Network Application Rules ...

Page 110: ... and 24 Port Gigabit L2 Managed Power over Ethernet PoE Switches 724 746 5500 blackbox com 110 Figure 4 130 Set up Typical Network Application Rules Figure 4 131 Set up Typical Network Application Rules ...

Page 111: ...pplication Rules Finish Parameter description Common Server DHCP DNS FTP HTTP IMAP NFS POP3 SAMBA SMTP TELNET TFTP Instant Messaging Google Talk MSN Messenger Yahoo Messenger User Definition Ethernet Type UDP Port TCP Port Others TCP Port ICMP Multicast IP Stream NetBIOS Ping Request Ping Reply SNMP SNMP Traps Ingress Port Any Policy 1 8 Port 1 8 Action Permit Deny ...

Page 112: ...d port the system will block the access by dropping its packet Function name IP MAC Binding Configuration Function description The switch has IP MAC Binding table The maximum number of IP MAC binding table entries is 1024 You can create authorized users manually The function is global so a user can enable or disable the function for all ports on the switch Figure 4 134 IP MAC binding configuration...

Page 113: ...e when the Authenticator PAE requests it Authenticator An entity facilitates the authentication of the supplicant entity It controls the state of the port authorized or unauthorized according to the result of the authentication message exchanged between it and a supplicant PAE The authenticator may request that the supplicant re authenticate itself at a configured time period Once re authenticatin...

Page 114: ...ether instead of single one for the link connecting two switches it may have perform two port roles at the end of the link authenticator and supplicant because the traffic is bi directional Figure 4 137 Typical configuration Figure 4 138 shows the 802 1X authentication procedure Follow the steps listed below for the login based on 802 1X port access control management The protocol used on the righ...

Page 115: ...8 If the user ID and password are correct the authentication server will send a Radius Access Accept to the authenticator If not correct the authentication server will send a Radius Access Reject 9 When the authenticator PAE receives a Radius Access Accept it will send an EAP Success to the supplicant The supplicant is then authorized and the port connected to the supplicant and under 802 1X contr...

Page 116: ...n 802 1x Port mode port control state set in 802 1X port setting Entry Authorized means a MAC entry is authorized Port Mode Port Control Authentication Port Status Disable Don t Care Don t Care Port Uncontrolled Multihost Auto Successful Port Authorized Multihost Auto Failure Port Unauthorized Multihost ForceUnauthorized Don t Care Port Unauthorized Multihost ForceAuthorized Don t Care Port Author...

Page 117: ...e lower case and 0 9 and is case sensitive Do not place blank spaces between any two characters Default Radius 4 12 2 Port Configuration Function name 802 1X Port Configuration Function description This function is used to configure the parameters for each port in 802 1X port security application Refer to the following parameters description for details Figure 4 140 802 1x port configuration Param...

Page 118: ...er of authentication attempts permitted before the port becomes unauthorized Default 2 txPeriod 1 65535 s The amount of time required to transmit the EAPOL PDU between the authenticator and the supplicant Default 30 Quiet Period 0 65535 s A period of time during which we will not attempt to access the supplicant Default 60 seconds reAuthEnabled Choose whether regular authentication will take place...

Page 119: ...odes Disable Normal Advance and Clientless Status Show this port s IEEE 802 1X security current status Authorized or Unauthorized 4 12 4 Statistics Function name 802 1X Port Statistics Port1 Function description Show the IEEE 802 1X authentication related counters to monitor authenticator status Figure 4 142 802 1x port statistics port 1 Parameter description ...

Page 120: ...c trunked port The benefit of using the Static Trunk method is that a port can immediately become a member of a trunk group without any handshaking with its peer port This is also a disadvantage because the peer ports of your static trunk group may not know that they should aggregate together to form a logical trunked port We recommend using Static Trunk on both ends of a link Note that low speed ...

Page 121: ...egins to send LACPDU to its link partner right after the LACP protocol entity started to take control of this port Passive A Passive LACP port will not actively send LACPDU out before it receives an LACPDU from its link partner Aggtr Aggtr is an abbreviation of aggregator Every port is also an aggregator and its own aggregator ID is the same as its own Port No We can regard an aggregator as a repr...

Page 122: ... member ports of an aggregator port Ready Ports Show only the ready member ports within an aggregator port 4 13 3 Aggregation Mode Configuration Function name Aggregation Mode Configuration Function description Use to configure the current port aggregate mode with 4 types Figure 4 145 Aggregation mode configuration Parameter description Source MAC Address Enables source MAC address for Aggregate M...

Page 123: ... system priority Parameter description System Priority Show the System Priority part of a system ID 1 65535 4 14 STP Configuration The Spanning Tree Protocol STP is a standardized method IEEE 802 1D for avoiding loops in switched networks When STP is enabled make sure that only one path is active between any two nodes on the network at a time Users can enable Spanning Tree Protocol on the switch s...

Page 124: ...y time The value of Forward Delay time is set by root The Forward Delay time is defined as the time spent from Listening state moved to Learning state or from Learning state moved to Forwarding state of a bridge port Hello Time Shows the current hello time of the root bridge Hello time is a time interval specified by root bridge used to request all other bridges periodically sending a hello messag...

Page 125: ...ion TCN BPDU to all other bridges All bridges in the LAN will re calculate and determine who the root bridge is The valid value of Max Age is 6 40 seconds The default is 20 seconds Forward Delay You can set the root bridge forward delay time This figure is set by the root bridge only The forward delay time is defined as the time spent from the Listening state moving to the Learning state and also ...

Page 126: ...lay this value in the Path Cost Status field Otherwise it may show the value that the administrator set up in Configured Path Cost and Path Cost Status 802 1w RSTP as the recommended value Valid range 1 200 000 000 10 Mbps 2 000 000 100 Mbps 200 000 1 Gbps 20 000 Default 0 Priority Priority here means Port Priority Port Priority and Port Number are mixed to form the Port ID Port IDs are often comp...

Page 127: ...mentation of MSTP is according to IEEE 802 1Q 2005 Clause 13 Multiple Spanning Tree Protocol MSTP allows frames assigned to different VLANs to follow separate paths each based on an independent Multiple Spanning Tree Instance MSTI within Multiple Spanning Tree MST Regions composed of LANs and or MST Bridges Proper configuration of MSTP in an 802 1Q VLAN environment can ensure a loop free data path...

Page 128: ...tance configuration Parameter description Instance ID Every spanning tree instance needs to have a unique instance ID within 0 4095 Instance 0 CIST always exists and cannot be deleted Additional spanning instances MSTIs can be added or deleted At least one VLAN must be provisioned for an MSTI to declare the need for the MSTI to exist Corresponding VLANs 0 4095 Multiple VLANs can belong to an MSTI ...

Page 129: ...ority The priority parameter used in the CIST Common and Internal Spanning Tree connection 0 4096 8192 12288 16384 20480 24576 28672 32768 36864 40960 45056 49152 53248 57344 61440 MAX Age 6 40 sec The same definition as in the RSTP protocol Forward Delay 4 30 sec The same definition as in the RSTP protocol MAX Hops 6 40 sec A new parameter for the multiple spanning tree protocol It is used in int...

Page 130: ...ST and ports of any MSTI Hello Time 1 2 In contrast with RSTP Hello Time in MSTP is a per port setting for the CIST Admin Edge Yes No This has the same definition as in the RSTP specification for the CIST ports Admin P2P Auto True False This has the same definition as in the RSTP specification for the CIST ports Restricted Role Yes No Yes causes the Port not to be selected as Root Port for the CIS...

Page 131: ...a result of persistent incorrectly learned station location information It is set by a network administrator to prevent bridges external to a core region of the network causing address flushing in that region possibly because those bridges are not under the full control of the administrator It checks the status of MAC operation for the attached LANs transitions frequently Mcheck The same definitio...

Page 132: ... an MST region is the root bridge of the CST Common Spanning Tree An MST Region in the CST can be regarded as a common RSTP bridge The IST Internal Spanning Tree and MSTIs are transparent to bridges outside this region CIST REGIONAL ROOT MAC Mac Address of the CIST regional root bridge CIST INTERNAL ROOT PATH COST Root path cost value from the point of view of the bridges inside the IST CIST CURRE...

Page 133: ...is a Point to Point Port Restricted Role Same as mentioned in Port Config Restricted Tcn Same as mentioned in Port Config 4 16 Mirror Function name Mirror Configuration Function description Mirror Configuration monitors the traffic of the network For example we assume that Port A and Port B are Monitoring Port and Monitored Port respectively The traffic received by Port B will be copied to Port A ...

Page 134: ...cket to the members who were joined in a specified IP multicast group The packets will be discarded by the IGMP Snooping if the user transmits multicast packets to the multicast group that was not built in advance 4 17 1 IGMP Mode Function name IGMP Mode Configuration Function description IGMP mode enables the switch to issue the IGMP function This enables IGMP proxy or snooping on the switch whic...

Page 135: ...h receives IGMP leave then switch send specific query frequency Available 1 16 secs Last Member Query Interval Set the frequency that the Switch will send specific queries Available 1 25 seconds Last Member Query Max Response Time Set the max response code value in the specific query packet Available 1 25 seconds Update Interval of Router Port To set the time interval that the interface receives I...

Page 136: ...uter Port in IGMP snooping mode 4 17 4 IGMP Group Membership Function name IGMP Group Membership Function description To show the IGMP group members information the you can edit the parameters for IGMP groups and members in the web user interface Figure 4 162 IGMP group membership Parameter description Index Display the current built up multicast group entry index Group Address Display the current...

Page 137: ...be disabled when MVR is enabled NOTE Use this function with a tag based VLAN mode Figure 4 163 MVR configuration Parameter description MVR Enable Set the MVR function enable Host Time Out To set the MVR function enable and the Host packet received by the Switch timeout period The units are seconds and the time range is from 1 to 65535 The default is 125 seconds Fast Leave Set which port will enabl...

Page 138: ... the MVR Group ID Member Port Sets which port will join the MVR Group member Router Port Sets which port will become the MVR Group router port 4 17 7 Group Allow Function name MVID Group Allow Function description The Group Allow function allows the Multicast VLAN Registration to set up the IP multicast group filtering conditions IGMP items that behave the same as the items you set up will be join...

Page 139: ... 0 0 239 255 255 255 MVID The switch supports two kinds of options for managed valid MVID including Any and Custom The default is Any When you choose Custom you can fill in the VID number The valid VID range is 1 4094 4 17 8 MVR Group Membership Function name MVR Group Membership Function description Displays the MVR Group Membership information Figure 4 167 MVID Group Membership Parameter descrip...

Page 140: ...ation while pre defined trap events occur The switch offers 24 different trap events to users for switch management The trap information can be sent out using email short message system and trap The message will be sent while users check the checkbox for the trap event individually on the web page as shown below Figure 4 168 Trap Events Configuration page Parameter description Trap Cold Start Warm...

Page 141: ...ettings An email address or a mobile phone number has to be set in the web page of alarm configuration See Fig 3 61 Then users can read the trap information from the email This function provides 6 email addresses at most The 24 different trap events will be sent out to SNMP Manager when a trap event occurs After checking trap events fill in your desired email addresses and mobile phone numbers The...

Page 142: ...ver You can use this information to track an IP address back to a physical port Figure 4 170 DHCP Snooping State Parameter description DHCP Snooping state The parameter disables or enables the DHCP snooping function on the switch The default is Disabled NOTE Click on the Apply button when you finish the configuration 4 19 2 DHCP Snooping Entry Function name DHCP Snooping Entry Function description...

Page 143: ... disabled all DHCP packets are forwarded If DHCP snooping is enabled and also enabled on the VLAN where the DHCP packet is received all DHCP packets are forwarded to a trusted port If DHCP snooping is enabled on the VLAN where the DHCP packet is received but the port is not trusted it processes the packet as follows If the DHCP packet is a reply packet from a DHCP server the packet is dropped If t...

Page 144: ...IP address Lease Shows the DHCP snooping client s lease 4 20 LLDP The switch supports the LLDP For current information on your switch model The Link Layer Discovery Protocol LLDP provides a standards based method for enabling switches to advertise themselves to adjacent devices and to learn about adjacent LLDP devices 4 20 1 LLDP State Function name LLDP State Function description The LLDP state f...

Page 145: ...conds Mode Enables or disables the LLDP mode per port There are four types including Disable Tx_Rx Tx only and Rx only Port Descr Enables or disables the outbound LLDP advertisements This includes an alphanumeric string describing the port Sys Name Enables or disables the outbound LLDP advertisements This includes the system s assigned name Sys Descr Enables or disables outbound LLDP advertisement...

Page 146: ...name Displays the system name which connect to the switch and which device supports the LLDP Port Description Displays an alphanumeric string describing the full name and version identification for the system s hardware type software version and networking application System Capabilities Display includes a bitmask of system capabilities device functions that are supported Also includes information...

Page 147: ...rames Discarded Show the number of frames discarded TLVs Discarded Show the number of TLVs discarded TLVs Unrecognized Show the number of TLVs unrecognized Age Outs Show the number of Age Outs 4 21 Save Restore The switch supports three copies of configuration including the default configuration working configuration and user configuration are listed and described below Default Configuration This ...

Page 148: ... can retrieve it by performing Restore User Configuration 4 21 1 Factory Defaults Function name Restore Default Configuration includes default IP address Function description Restore Default Configuration function can retrieve ex factory settings to replace the start configuration The IP address of the switch will also be restored to 192 168 1 1 Figure 4 176 Factory defaults reset screen 4 21 2 Sa...

Page 149: ...The Restore User Configuration function can retrieve the previous confirmed working configuration stored in the flash memory to update start configuration When restoring the configuration the system s start configuration is updated and its system settings will change after rebooting the system Figure 4 179 Restore user configuration prompt 4 22 Export Import Function name Export Import Function de...

Page 150: ...flash Import User Conf Import Save As User s config file stored in the flash 4 23 Diagnostics Three functions including Diagnostics Loopback Test and Ping Test are contained in this function folder for device self diagnostics Each of them is described in detail in the following sections 4 23 1 Diag Function name Diagnostics Function description The Diagnostics function provides a set of basic syst...

Page 151: ...address with version v4 e g 192 168 1 1 Default Gateway IP address of the default gateway Figure 4 182 ICMP ping screen Figure 4 183 ICMP ping output screen 4 24 Maintenance This section introduces the reset and firmware upgrade functions for the firmware upgrade and key parameters change system maintenance requirements 4 24 1 Warm Restart Function name Warm Restart Function description There are ...

Page 152: ...reboot the switch for the new firmware to take effect after the firmware upgrades successfully Figure 4 185 Firmware upgrade screen 4 25 Logout Manually logout by performing the Logout function Or you can configure it to logout automatically Function name Logout Function description The switch allows you to logout the system to prevent other users from the system without the permission If you do n...

Page 153: ... CLI through either a direct serial connection to the device or a Telnet session The default values of the managed switch are listed below Username admin Password admin After you login successfully the prompt will be shown as if you are the first person to login and your authorization is administrator otherwise it may show See the following two figures The former means you are an administrator and...

Page 154: ...ption Back to the top mode When you enter this command your current position would move to the top mode If you use this command in the top mode you are still in the position of the top mode Argument None Possible value None Example LPB4008A alarm LPB4008A alarm events LPB4008A alarm events end LPB4008A Managed Switch Login Admin Password Managed Switch help Local Commands 802 1X Enter into 802 1X ...

Page 155: ...PB4008A ip help Commands available Local commands set ip Set ip subnet mask and gateway set dns Set dns enable dhcp Enable DHCP and set dns auto or manual disable dhcp Disable DHCP show Show IP Configuration Global commands exit Back to the previous mode end Back to the top mode help Show available commands history Show a list of previously run commands logout Logout the system save start Save as ...

Page 156: ...m and return to the initial login prompt when you run this command Argument None Possible value None Example LPB4008A logout restore default Syntax restore default Description When you use this function in CLI the system will show you the information Do you want to restore the default IP address y n If you choose Y or y the IP address will restore to default 192 168 1 1 If you choose N or n the IP...

Page 157: ...replaces a user defined one Argument None Possible value None Example LPB4008A restore user Restoring Restore User Configuration Successfully Press any key to reboot system save start Syntax save start Description Save the current configuration as the startup one When you enter this command the CLI saves your current configuration into the non volatile FLASH If you want the configuration to work a...

Page 158: ...plicant before it times out the authentication session Argument port range syntax 1 5 7 available from 1 to 8 value max times range 1 10 Possible value port range 1 to 8 value 1 10 default is 2 Example LPB4008A 802 1X set maxReq 2 2 set mode Syntax set mode port range mode Description Set up the 802 1X authentication mode of each port Argument port range syntax 1 5 7 available from 1 to 8 mode set...

Page 159: ...A timer used by the Authenticator state machine to define periods of time during when it will not attempt to acquire a Supplicant Argument port range syntax 1 5 7 available from 1 to 8 value timer range 0 65535 Possible value port range 1 to 8 value 0 65535 default is 60 Example LPB4008A 802 1X set quietPeriod 2 30 set reAuthEnabled Syntax set reAuthEnabled port range on off Description A constant...

Page 160: ...o 8 value timer range 1 65535 Possible value port range 1 to 8 value 1 65535 default is 3600 Example LPB4008A 802 1X set reAuthPeriod 2 3600 set serverTimeout Syntax set serverTimeout port range value Description A timer used by the Backend Authentication state machine to determine timeout conditions in the exchanges between the Authenticator and the Supplicant or Authentication Server The initial...

Page 161: ...or Authentication Server The initial value of this timer is either suppTimeout or serverTimeout as determined by the operation of the Backend Authentication state machine Argument port range syntax 1 5 7 available from 1 to 8 value timer range 1 65535 Possible value port range 1 to 8 value 1 65535 default is 30 Example LPB4008A 802 1X set suppTimeout 2 30 set txPeriod Syntax set txPeriod port rang...

Page 162: ... to 8 Example LPB4008A 802 1X show port config 1 2 port 1 Mode Disabled port control Auto reAuthMax 2 txPeriod 30 Quiet Period 60 reAuthEnabled ON reAuthPeriod 120 max Request 2 suppTimeout 30 serverTimeout 30 port 2 Mode Disabled port control Auto reAuthMax 2 txPeriod 30 Quiet Period 60 reAuthEnabled ON reAuthPeriod 120 max Request 2 suppTimeout 30 serverTimeout 30 show statistics Syntax show sta...

Page 163: ... add name Description Create a new guest user When you create a new guest user you must type in the password and confirm it Argument name new account name Possible value A string must be at least 5 characters Example LPB4008A account add aaaaa Password Confirm Password LPB4008A account Del Syntax del name Description Delete an existing account Argument name existing user account Possible value Non...

Page 164: ...ord changed successfully Show Syntax show Description Shows system account including account name and identity Argument None Possible value None Example LPB4008A account show Account Name Identity admin Administrator guest guest C acl ace Syntax ace index Description Displays the ace configuration Argument index the access control rule index value Possible value None Example LPB4008A acl ace 2 ind...

Page 165: ...n port permit deny rate_limiter port copy Description Set the access control per port as a packet filter action rule Argument port 1 8 permit deny permit 1 deny 0 rate_limiter 0 16 0 disable port copy 0 8 0 disable Possible value port 1 8 permit deny 0 1 rate_limiter 0 16 port copy 0 8 Example LPB4008A acl action 5 0 2 2 LPB4008A acl show port policy id action rate limiter port copy counter a clas...

Page 166: ... access control rule index value Possible value None Example LPB4008A acl delete 1 LPB4008A acl Move Syntax move index1 index2 Description Move the ACE Access Control Entry configuration between index1 and index2 Argument None Possible value None Example LPB4008A account move 1 2 Policy Syntax policy policy ports Description Set acl port policy on the switch Argument policy 1 8 ports 1 24 Possible...

Page 167: ...licy vid tag_prio dmac_type any etype etype smac arp arp type opcode any source ip source ip mask any destination ip destination ip mask source mac arp smac match flag raro dmac match flag ip ethernet length flag ip flag ethernet flag ip source ip source ip mask any destination ip destination ip mask any ip ttl ip fragment ip option icmp icmp type icmp code udp source port range destination port r...

Page 168: ...imiter rate pps 1 1 2 1 3 1 4 1 5 1 LPB4008A acl D alarm a email b del mail address Syntax del mail address Description Remove the E mail address configuration Argument email address number range 1 to 6 Possible value 1 to 6 Example LPB4008A alarm email del mail address 2 del server user Syntax del server user Description To remove the server configuration user account and password Argument None P...

Page 169: ...ail server Argument ip email server ip address or domain name Possible value None Example LPB4008A alarm email set server 192 168 1 6 set user Syntax set user username Description Set up the account and password of the email server Argument username email server account and password Possible value None Example LPB4008A alarm email set user admin Show Syntax show Description Display the configurati...

Page 170: ...del all 1 3 del email Syntax del email range Description Disable the events email Argument range del the range of email syntax 1 5 7 Possible value range 1 24 Example LPB4008A alarm events del email 1 3 del trap Syntax del trap range Description Disable the events trap Argument range del the range of trap syntax 1 5 7 Possible value range 1 24 Example LPB4008A alarm events del trap 1 3 set all Syn...

Page 171: ...Enable the events trap Argument range set the range of trap syntax 1 5 7 Possible value range 1 24 Example LPB4008A alarm events set trap 1 3 Show Syntax show Description Display the alarm event configuration Argument None Possible value None Example LPB4008A alarm events show Events Email Trap 1 Cold Start v 2 Warm Start v 3 Link Down v 4 Link Up v 5 Authentication Failure v 6 Login 7 Logout 8 Mo...

Page 172: ...error show alarm Syntax show Description Show alarm displays the configuration of Events or E mail Argument None Possible value None Example LPB4008A alarm show events LPB4008A alarm show email E autologout Autologout Syntax autologout time Description Set up the autologout timer Argument time range 1 to 3600 seconds 0 for autologout off current setting is 180 seconds Possible value time 0 1 3600 ...

Page 173: ...8A config file import current 192 168 1 63 Import successful G firmware Upgrade Syntax upgrade ip_address file_path Description Set up the image file that will be upgraded Argument ip address TFTP server ip address filepath upgrade file path Possible value ip address TFTP server ip address filepath upgrade file path Example LPB4008A firmware upgrade 192 168 2 4 fgs2924R_LPB4008A_v2 03 img H gvrp s...

Page 174: ... to 4094 port 1 to 8 0 1 Possible value vid 1 4094 port 1 to 8 Example LPB4008A gvrp group applicant 2 5 0 GVRP group information Current Dynamic Group Number 1 VID Member Port 2 5 set applicant Syntax set applicant port 0 1 Description Set default applicant mode for each port Argument port port range syntax 1 5 7 available from 1 to 8 0 set applicant as normal mode 1 set applicant as non particip...

Page 175: ...ime Leave Time LeaveAll Time Applicant Registrar Restricted 1 20 60 1000 Normal Normal Enable 2 20 60 1000 Normal Normal Enable 3 20 60 1000 Normal Normal Enable 4 20 60 1000 Normal Normal Enable 5 20 60 1000 Normal Normal Enable 6 20 60 1000 Normal Normal Enable 7 20 60 1000 Normal Normal Enable 8 20 60 1000 Normal Normal Enable set timer Syntax set timer port JoinTime leaveTime leaveAllTime Desc...

Page 176: ...al Normal Disable 8 25 80 2000 Normal Normal Disable counter Syntax counter port Description Display the port s number Argument port port number Possible value port available from 1 to 8 Example LPB4008A gvrp counter 2 Received Total GVRP Packets 0 Invalid GVRP Packets 0 LeaveAll message 0 JoinEmpty message 0 JoinIn message 0 LeaveEmpty message 0 Empty message 0 Transmitted Total GVRP Packets 0 In...

Page 177: ...gmp set drp Syntax set drp port Description Set router ports to disable Argument port syntax 1 5 7 available from 1 to 8 Possible value port 1 to 8 Example LPB4008A igmp set drp 1 10 set erp Syntax set erp port Description Set router ports to enable Argument port syntax 1 5 7 available from 1 to 8 Possible value port 1 to 8 Example LPB4008A igmp set erp 1 set flood Syntax set flood state Descripti...

Page 178: ...gm show igmpp Syntax show igmpp Description Display igmp proxy setting Argument None Possible value None Example LPB4008A igmp show igmpp K IP disable dhcp Syntax disable dhcp Description Disable the system s DHCP function Argument None Possible value None Example LPB4008A ip disable dhcp enable dhcp Syntax enable dhcp manual auto Description Enable the system s DHCP function and set DNS server vi...

Page 179: ...d gateway Argument ip ip address mask subnet mask gateway default gateway Possible value ip 192 168 1 2 or others mask 255 255 255 0 or others gateway 192 168 1 253 or others Example LPB4008A ip set ip 192 168 1 2 255 255 255 0 192 168 1 253 Show Syntax show Description Display the system s DHCP function state IP address subnet mask default gateway DNS mode DNS server IP address and current IP add...

Page 180: ...1 to 8 vid vlan id 1 to 4094 Possible value 0 1 0 Client 1 Server mac format 00 02 03 04 05 06 ip ip address port 1 to 8 vid 1 to 4094 Example LPB4008A ip_mac_binding set entry 1 00 11 2f de 7b a9 192 168 2 2 1 1 delete ip Syntax delete ip 0 1 ip Description Delete ip mac binding entry by ip Argument 0 1 0 client 1 server ip ip address Possible value None Example LPB4008A ip_mac_binding delete ip ...

Page 181: ...le value 1 to 8 Example LPB4008A loop detection disable 1 8 LPB4008A loop detection show Detection Port Locked Port Port Status Port Status 1 Disable 1 Normal 2 Disable 2 Normal 3 Disable 3 Normal 4 Disable 4 Normal 5 Disable 5 Normal 6 Disable 6 Normal 7 Disable 7 Normal 8 Disable 8 Normal Enable Syntax enable Description Enable the detection function for the switch ports Argument set up the rang...

Page 182: ...7 available form 1 to 8 Possible value 1 to 8 Example LPB4008A loop detection resume 1 8 LPB4008A loop detection show Detection Port Locked Port Port Status Port Status 1 Enable 1 Normal 2 Enable 2 Normal 3 Enable 3 Normal 4 Enable 4 Normal 5 Enable 5 Normal 6 Enable 6 Normal 7 Enable 7 Normal 8 Enable 8 Normal show Syntax show Description Display loop detection configure Argument None Possible va...

Page 183: ...03 test3 LPB4008A mac alias show MAC Alias No MAC Alias 1 23 56 00 55 3F 03 test3 2 23 56 00 55 EF 03 test13 3 23 56 00 55 EF 33 test1 LPB4008A mac alias del 23 56 00 55 3F 03 LPB4008A mac alias show MAC Alias No MAC Alias 1 23 56 00 55 EF 03 test13 2 23 56 00 55 EF 33 test1 set Syntax set mac alias Description Set mac alias entry Argument mac mac address xx xx xx xx xx xx alias mac alias name max...

Page 184: ...ssible value none Example LPB4008A mac alias show MAC Alias No MAC Alias 1 23 56 00 55 3F 03 test3 2 23 56 00 55 EF 03 test13 3 23 56 00 55 EF 33 test1 mac table flush Syntax flush Description Delete dynamic MAC entry Argument none Possible value none Example LPB4008A mac mac table flush LPB4008A mac mac table show No Type VLAN MAC Port Members 1 Static 1 FF FF FF FF FF FF 1 2 3 4 5 6 7 8 show Syn...

Page 185: ...e LPB4008A mac table maintain set age time 300 LPB4008A mac maintenance show E api_ai 26 vtss_ Aging Configuration Enter into sta Age time 300 mode MAC Table Learning Port Learning Mode Global commands 2 Auto 3 Auto 4 Auto 5 Auto 6 Auto 7 Auto set learning Syntax set learning range auto disable secure Description Set MAC table learning Argument range syntax 1 5 7 available from 1 to 8 auto auto le...

Page 186: ...earning Port Learning Mode Global commands 2 Auto 3 Auto 4 Auto 5 Auto 6 Auto 7 Auto 8 Auto show Syntax show Description To display mac table maintenance Argument None Possible value None Example LPB4008A mac maintenance show 1 Static Aging Configuration FF 1 2 3 4 5 6 7 8 Age time 3004 15 16 17 1 MAC Table Learning Port Learning Mode 2 Auto 3 Auto 4 Auto 5 Auto 6 Auto 7 Auto 8 Auto static mac add...

Page 187: ...04 05 06 3 0 aaa LPB4008A mac static mac del Syntax del mac vid Description Delete the static MAC entry Argument mac mac address format 00 02 03 04 05 06 vid vlan id 0 1 4094 VID must be zero if vlan mode is not tag based Possible value mac mac address vid 0 1 4094 Example LPB4008A mac static mac del 00 02 03 04 05 06 0 LPB4008A mac static mac show filter Syntax show filter Description Display the...

Page 188: ...et mirror port and enable disable mirror function Argument port available from 1 to 8 and 0 1 to 8 available port number 0 disable mirror function Possible value 1 to 8 Example LPB4008A mirror set mirror 2 set monitor destination Syntax set monitor destination range Description Set monitor destination port The packets sent by this port will be copied to the monitoring port Argument range the port ...

Page 189: ...the mirror function Only one port can be configured available from 1 to 8 Possible value range 1 to 8 Example LPB4008A mirror set monitor source 8 LPB4008A mirror show Port to mirror to 1 Port Source Enable Destination Enable 2 V 3 V 4 V 5 V 6 V 7 V 8 V LPB4008A mirror Show Syntax show Description Display the mirror configuration s setting status Argument None Possible value None Example LPB4008A ...

Page 190: ...ument Usage migrate check port range port range syntax 1 5 7 available from 1 to 8 Possible value Usage migrate check port range port range syntax 1 5 7 available from 1 to 8 Example LPB4008A mstp migrate check 1 2 set config Syntax set config Max Age Forward Delay Max Hops Description Set max age forward delay max hops Argument Max Age available from 6 to 40 Recommended value is 20 Forward Delay ...

Page 191: ... created and or vlan s have been added to map to this msti LPB4008A mstp set p cost Syntax set p cost instance_id port range path cost Description Set port path cost per instance Argument port range syntax 1 5 7 available from 1 to 8 path cost 0 1 200000000 The value zero means auto status Possible value port range available from 1 to 8 path cost The value zero means auto status 0 2000000000 Examp...

Page 192: ... hello 4 7 1 LPB4008A mstp set p p2p Syntax set p p2p port range admin p2p Description Set per port admin p2p Argument port range syntax 1 5 7 available from 1 to 8 admin p2p Admin point to point auto true false Possible value port range syntax 1 5 7 available from 1 to 8 admin p2p Admin point to point auto true false Example LPB4008A mstp set p p2p 7 8 auto LPB4008A mstp set priority Syntax set p...

Page 193: ...L ROOT PATH COST 0 CIST ROOT PORT ID 0 CIST REGIONAL ROOT PRIORITY 4096 CIST REGIONAL ROOT MAC 00 40 c7 5e 00 09 CIST INTERNAL ROOT PATH COST 0 CIST CURRENT MAX AGE 20 CIST CURRENT FORWARD DELAY 15 TIME SINCE LAST TOPOLOGY CHANGE SECs 2 TOPOLOGY CHANGE COUNT SECs 0 LPB4008A mstp set r role Syntax set r role port range restricted role Description Set per port restricted role Argument port range syn...

Page 194: ...tcn Description Set per port restricted tcn Argument port range syntax 1 5 7 available from 1 to 8 restricted tcn 0 false 1 True Possible value port range 1 to 8 restricted tcn 0 false 1 True Example LPB4008A mstp set r tcn 1 4 1 LPB4008A mstp set r tcn 5 8 1 LPB4008A mstp show pconf 0 Port Path Cost Priority Hello Edge Port P2P Role Tcn system Enter in q to quit 2 0 128 2 true auto false false 3 ...

Page 195: ...ample LPB4008A mstp set revision level 30000 LPB4008A mstp show region info Name test2 Revision 30000 Instances 0 LPB4008A mstp set version Syntax set version stp rstp mstp Description Set force version Argument revision level 0 65535 Possible value revision level 0 65535 Example GS 2924 mstp set version mstp show instance Syntax show instance instance id Description Show instance status Argument ...

Page 196: ... 00 09 CIST INTERNAL ROOT PATH COST 0 CIST CURRENT MAX AGE 20 CIST CURRENT FORWARD DELAY 15 TIME SINCE LAST TOPOLOGY CHANGE SECs 2569 TOPOLOGY CHANGE COUNT SECs 0 LPB4008A mstp show pconf Syntax show pconf instance id Description Show port configuration Argument instance id 0 CIST 1 4095 MSTI Possible value instance id 0 CIST 1 4095 MSTI Example LPB4008A mstp show pconf 0 set r role Se 2 0 128 2 t...

Page 197: ...on info Syntax show region info Description Show region config Argument none Possible value none Example LPB4008A mstp show region info Name test2 Revision 30000 Instances 0 LPB4008A mstp show vlan map Syntax show vlan map instance id Description Show vlan mapping of an instance Argument nstance id 0 CIST 1 4095 MSTI Possible value instance id 0 CIST 1 4095 MSTI Example LPB4008A mstp show vlan map...

Page 198: ...y Access Type HTTP TELENT SNMP Port 11 12 13 14 15 3 Name Mary IP Range 192 168 3 1 192 168 3 4 Action Deny Access Type Any Port Any LPB4008A policy Delete Syntax delete index Description Delete a management policy entry Argument index a specific or range management policy entry s e g delete 2 3 4 7 Possible value index a specific or range management policy entry s Example LPB4008A policy add name...

Page 199: ...3 192 168 4 33 Action Deny Access Type TELNET SNMP Port 6 7 8 R port clear counter Syntax clear counter Description Clear all ports counter include simple and detail port counter information Argument None Possible value None Example LPB4008A port clear counter set description Syntax set description port range description Description Set port description Argument port range syntax 1 5 7 available f...

Page 200: ...on port range discard restart Description Set port description Argument port range syntax 1 5 7 available from 1 to 8 Possible value port range 1 to 8 Example LPB4008A port set excessive collision 6 10 restart LPB4008A port show config Speed Flow Maximum Excessive Port Duplex Control Frame Collision Description a list of previously run command set priority DISCAR 2 Auto Disabled 9600 Discard 3 Aut...

Page 201: ...alue 1518 9600 bytes Example LPB4008A port set max frame 3 6 1518 LPB4008A port show config Speed Flow Maximum Excessive commands 2 Auto Disabled 9600 Discard 3 Auto Enabled 1518 Discard salesdepartment 4 Auto Enabled 1518 Discard salesdepartment 5 Auto Enabled 1518 Discard salesdepartment 6 Auto Enabled 1518 Restart salesdepartment 7 Auto Enabled 9600 Restart salesdepartment 8 Auto Enabled 9600 R...

Page 202: ... Disabled show config Syntax show config Description Display each port s configuration information Argument None Possible value None Example LPB4008A port show config Speed Flow Maximum Excessive Port Duplex Control Frame Collision Description 1 Auto Disabled 9600 Discard 2 1G Full Disabled 9600 Discard 3 Auto Disabled 9600 Discard 4 1G Full Disabled 9600 Discard 5 1G Full Disabled 9600 Discard 6 ...

Page 203: ...or Counters Rx Drops 0 Tx Drops 0 Rx CRC Alignment 0 Tx Late Exc Coll 0 Rx Undersize 0 Rx Oversize 0 Rx Fragments 0 Rx Jabber 0 show sfp Syntax show sfp port Description Display the SFP module information Argument port SFP port of the switch available from 7 8 Possible value port 7 8 Example LPB4008A port show sfp 7 Port 7 SFP information Connector Type SFP Unknown or unspecified Fiber Type Reserv...

Page 204: ...sable Port Link Duplex Rx Pause Tx Pause Description 3 Auto Disabled 9600 Discard 2 Down Down Disabled Disabled 3 Up 100M Full Disabled Disabled 4 Down Down Disabled Disabled 5 Down Down Disabled Disabled 6 Down Down Disabled Disabled 7 Up 1G Full Disabled Disabled 8 Down Down Disabled Disabled LPB4008A port S qos a ports set class Syntax set class Description Set the number of classes Argument Nu...

Page 205: ...mal medium high qcl 1 to 24 user priority 0 to 7 queuing mode strict weighted low queue weighted 1 2 4 8 normal queue weighted 1 2 4 8 medium queue weighted 1 2 4 8 high queue weighted 1 2 4 8 Example LPB4008A qos ports set port 2 medium 1 3 weithted 2 2 2 2 LPB4008A qos ports show 2 Medium 1 3 Weighted Fair 2 2 2 2 3 Low 1 0 Strict Priority 1 2 4 8 4 Low 1 0 Strict Priority 1 2 4 8 5 Low 1 0 Stri...

Page 206: ...ntax set dscp tos tagpriority qce type value class Description Add the QCE entry in the specific QCL Argument dscp dscp field syntax 1 5 7 available from 0 to 63 tos tos priority available from 1 to 8 tagpriority tag priority available from 1 to 8 qce type Ethernet value 0xfff0 class high Possible value dscp dscp field syntax 1 5 7 available from 0 to 63 tos tos priority available from 1 to 8 tagp...

Page 207: ...specific QCE entry in the specific QCL Argument qcl the qcl number available from 1 to 24 qce range 1 5 7 available from 1 to 12 Possible value qcl available from 1 to 24 qce range available from 1 to 12 Example LPB4008A qos qcl delete 2 1 c rate set Syntax set range policer enabled rate unit shaper enabled rate unit Description Set rate limit configuration Argument range syntax 1 5 7 available fr...

Page 208: ...adcast status rate Description Set broadcast storm control configuration Argument status 1 means enable and 0 means disable rate 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k Possible value status 1 means enable and 0 means disable rate 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k Example LPB4008A qos storm set broadcast 1 512 LPB4008A qos storm show Fr...

Page 209: ...1 means enable and 0 means disable rate 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k Possible value status 1 means enable and 0 means disable rate 1 2 4 8 16 32 64 128 256 512 1k 2k 4k 8k 16k 32k 64k 128k 256k 512k Example LPB4008A qos storm set unicast 1 128 LPB4008A qos storm show Frame Type Status Rate Packet Per Second Flooded unicast V 128 Multicast V 64 Broadcast V 512...

Page 210: ... Description Disable is used to de activate snmp or set community Argument None Possible value None Example LPB4008A snmp disable snmp LPB4008A snmp disable set ability Enable Syntax enable set ability enable snmp Description Enable is used to activate snmp or set community Argument None Possible value None Example LPB4008A snmp enable snmp LPB4008A snmp enable set ability Set Syntax set get commu...

Page 211: ...162 public Show Syntax show Description Show displays the SNMP configuration Argument None Possible value None Example LPB4008A snmp show SNMP Enable Get Community public Set Community private Enable Trap Host 1 IP Address 192 168 1 1 Port 162 Community public Trap Host 2 IP Address 0 0 0 0 Port 162 Community public Trap Host 3 IP Address 0 0 0 0 Port 162 Community public Trap Host 4 IP Address 0 ...

Page 212: ...scription Enables the STP function Argument None Possible value None Example LPB4008A stp enable set config Syntax set config Bridge Priority Hello Time Max Age Forward Delay Description Set up the STP parameters Argument Bridge Priority priority must be a multiple of 4096 available from 0 to 61440 Hello Time available from 1 to 10 Max Age available from 6 to 40 Forward Delay available from 4 to 3...

Page 213: ...om 0 to 240 edge_port Admin Edge Port yes no admin p2p Admin point to point auto true false Possible value range 1 to 8 path cost 0 1 200000000 priority 0 to 240 edge_port yes no admin p2p auto true false Example LPB4008A stp set port 1 16 0 128 yes auto set version Syntax set version stp rstp Description Set up the STP version Argument stp rstp stp rstp Possible value stp rstp stp rstp Example LP...

Page 214: ... Possible value None Example LPB4008A stp LPB4008A stp show port Port Port Status Path Cost Priority Admin Edge Port Admin Point To Point 1 DISCARDING 2000000 128 No Auto 2 DISCARDING 2000000 128 No Auto 3 DISCARDING 2000000 128 No Auto q to quit show status Syntax show status Description Display the STP status Argument None Possible value None Example LPB4008A stp show status STP Status STP State...

Page 215: ...ue contact A b c d z and 1 2 3 etc Example LPB4008A system set contact Taipei set device name Syntax set device name device name string Description Set the switch s device name description Argument device name string length up to 40 characters Possible value device name A b c d z and 1 2 3 etc Example LPB4008A system set device name CR 2600 set location Syntax set location location string Descript...

Page 216: ...me LPB4008A System Up Time 0 Days 0 Hours 4 Mins 14 Secs Current Time Tue Jan 17 16 28 46 2006 BIOS Version v1 05 Firmware Version v2 08 Hardware Mechanical Version v1 01 v1 01 Serial Number 030C02000003 Host IP Address 192 168 1 1 Host MAC Address 00 40 c7 e7 00 10 Device Port UART 1 TP 22 Dual Media Port RJ45 SFP 2 RAM Size 16 M Flash Size 2 M X traplog clear Syntax clear Description Clear the t...

Page 217: ...15 18 38 2008 Dual Media Swapped Port 5 SwapTo TP 7 Mon Mar 17 15 18 38 2008 Link Up Port 5 8 Mon Mar 17 15 18 48 2008 Login admin Y time set daylightsaving Syntax set daylightsaving hr MM DD HH mm dd hh Description Set up the daylight savings time Argument hr daylight saving hour range 5 to 5 MM daylight saving start Month 01 12 DD daylight saving start Day 01 31 HH daylight saving start Hour 00 ...

Page 218: ...t ntp Syntax set ntp ip timezone Description Set up the current time via an NTP server Argument ip ntp server ip address or domain name timezone time zone GMT range 12 to 13 Possible value timezone 12 11 0 1 13 Example LPB4008A time set ntp clock via net 8 Synchronizing 1 Synchronization success Show Syntax show Description Show the time configuration including Current Time NTP Server Timezone Day...

Page 219: ...5 default 32768 Example LPB4008A trunk set priority 33333 set trunk Syntax set trunk port range method group active LACP Description Set up the status of trunk including the group number and mode of the trunk as well as the LACP mode Argument port range port range syntax 1 5 7 available from 1 to 8 method static adopt the static link aggregation lacp adopt the dynamic link aggregation link aggrega...

Page 220: ...y Ports 1 Aggregator 2 Method LACP Member Ports 2 Ready Ports show lacp detail Syntax show lacp detail aggtr Description Display the LACP trunk group s detailed information Argument aggtr aggregator available from 1 to 8 Possible value aggtr 1 to 8 Example LPB4008A trunk show lacp detail 2 Aggregator 2 Information Actor Partner System Priority MAC Address System Priority MAC Address 32768 00 40 c7...

Page 221: ...ing Trunk Port Status port Method Group Active LACP Aggtregator Status 1 None 0 Active 1 Ready 2 LACP 1 Active 2 3 LACP 1 Active 3 4 LACP 1 Active 4 5 LACP 1 Active 5 6 LACP 1 Active 6 7 LACP 1 Active 7 A1 Vlan del port group Syntax del port group name Description Delete the port based vlan group Argument name which vlan group you want to delete Possible value name port vlan name Example LPB4008A ...

Page 222: ...on member port Argument range which port s you want to set syntax 1 5 7 available from 1 to 8 Possible value range 1 to 8 Example LPB4008A vlan disable sym vlan 5 10 enable drop untag Syntax enable drop untag range Description Drop the untagged frames Argument range which port s you want to set syntax 1 5 7 available from 1 to 8 Possible value range 1 to 8 Example LPB4008A vlan enable drop untag 5...

Page 223: ...A vlan set double tag Syntax set double tag range 0 1 2 Description Set double tag per port and enable Q in Q VLAN function on switch Argument range 1 5 7 available from 1 to 8 0 disable 1 service provider port 2 customer port Possible value range 1 to 8 Example LPB4008A vlan set double tag 3 1 LPB4008A vlan set port group Syntax set port group name range Description To add or edit a port based VL...

Page 224: ...t pvid Syntax set pvid range pvid Description Set the pvid of vlan Argument range which port s you want to set PVID s syntax 1 5 7 available from 1 to 8 pvid which PVID s you want to set available from 1 to 4094 Possible value range 1 to 8 pvid 1 to 4094 Example LPB4008A vlan set pvid 3 5 6 8 5 set tag group Syntax set tag group vid name range Description Add or edit the tag based vlan group Argum...

Page 225: ... 7 8 9 10 11 12 13 14 15 16 2 Vlan Name VLAN 2 Vlan ID 2 Sym vlan Disable Member 2 3 4 5 6 13 14 15 show port Syntax show port Description Display pvid ingress egress rule Argument None Possible value None Example LPB4008A vlan show pvid Port PVID Rule1 Rule2 Port Rule Untag Vid 1 1 Disable Disable Access 2 1 Disable Disable Access 3 5 Disable Disable Access 4 1 Disable Disable Access 5 5 Enable D...

Page 226: ... you are using connection ports on that Managed Switch Check the uplink setup of the Managed Switch to verify the uplink function is enabled Q The console interface doesn t appear on the console port connection A The COM port default parameters are Baud Rate 115200 Data Bits 8 Parity Bits None Stop Bit 1 Flow Control None Make sure that the COM port is set property in the terminal program If the p...

Page 227: ...nd line interface The table below shows the pin assignments for the DB9 cable Function Mnemonic Pin Carrier CD 1 Receive Data RXD 2 Transmit Data TXD 3 Data Terminal Ready DTR 4 Signal Ground GND 5 Data Set Ready DSR 6 Request To Send RTS 7 Clear To Send CTS 8 The 9 pin null modem cable s pin assignment is as follows CD 1 4 DTR DSR 6 1 CD DTR 4 6 DSR RXD 2 3 TXD TXD 3 2 RXD GND 5 5 GND RTS 7 8 RTS...

Reviews:

No comments

Related manuals for LPB4008A

Brand: 4O3A Pages: 2

Underwater Switch 24V DC/DMX/02

Brand: Oase Pages: 40

QuantaMesh T1048-LB9

Brand: QCT Pages: 42

Brand: Black Box Pages: 28

Brand: UniFi Pages: 8

Universal Videohub 288

Brand: Blackmagicdesign Pages: 107

Liquipoint FTW33

Brand: Endress+Hauser Pages: 48

Brand: Edimax Pages: 2

Brand: Black Box Pages: 21

Brand: Yacoub Automation GmbH Pages: 45

302523/20191008SZ114

Brand: Primewire Pages: 12

Brand: StarTech.com Pages: 2

Brand: ATEN Pages: 125

Brand: QSFPTEK Pages: 10

QSW-M3212R-8S4T

Brand: QNAP Pages: 29

Brand: Q3 ENERGIE Pages: 28

Brand: QNAP Pages: 89

Brand: Chauvet Pages: 15

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands